CVE-2025-40623

SQL injection in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to inject an SQL statement to obtain, update and delete all information in the database. This vulnerability was found in each of the following parameters according to the vulnerability identifier ‘Sender’ and...

CVE-2025-40623

SQL injection in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to inject an SQL statement to obtain, update and delete all information in the database. This vulnerability was found in each of the following parameters according to the vulnerability identifier ‘Sender’ and...

CVE-2025-40621

SQL injection in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to inject an SQL statement to obtain, update and delete all information in the database. This vulnerability was found in each of the following parameters according to the vulnerability identifier ‘User’...

CVE-2025-40622

SQL injection in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to inject an SQL statement to obtain, update and delete all information in the database. This vulnerability was found in each of the following parameters according to the vulnerability identifier ‘username’...

CVE-2025-40624

TCMAN’s GIM v11 is affected by a SQL injection in the updatePassword endpoint, exploitable by an unauthenticated attacker via the vulnerable parameters User and email . The root cause is unvalidated input leading to the ability to obtain, update, and delete all information in the database. The vu...

CVE-2025-40623 Multiple vulnerabilities in TCMAN's GIM

SQL injection in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to inject an SQL statement to obtain, update and delete all information in the database. This vulnerability was found in each of the following parameters according to the vulnerability identifier ‘Sender’ and...

CVE-2025-40622 Multiple vulnerabilities in TCMAN's GIM

SQL injection in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to inject an SQL statement to obtain, update and delete all information in the database. This vulnerability was found in each of the following parameters according to the vulnerability identifier ‘username’...

CVE-2025-40621 Multiple vulnerabilities in TCMAN's GIM

SQL injection in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to inject an SQL statement to obtain, update and delete all information in the database. This vulnerability was found in each of the following parameters according to the vulnerability identifier ‘User’...

CVE-2025-40620: Improper Neutralization of Special Elements used in an SQL Command

SQL injection in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to inject an SQL statement to obtain, update and delete all information in the database. This vulnerability was found in each of the following parameters according to the vulnerability identifier ‘User’...

CVE-2025-40622: Improper Neutralization of Special Elements used in an SQL Command

SQL injection in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to inject an SQL statement to obtain, update and delete all information in the database. This vulnerability was found in each of the following parameters according to the vulnerability identifier ‘username’...

CVE-2025-40621: Improper Neutralization of Special Elements used in an SQL Command

SQL injection in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to inject an SQL statement to obtain, update and delete all information in the database. This vulnerability was found in each of the following parameters according to the vulnerability identifier ‘User’...

Tcman Gim has a SQL injection vulnerability

Tcman Gim is a facility management software from Tcman Spain designed for use on mobile devices. A SQL injection vulnerability exists in Tcman Gim version v11. The vulnerability stems from unvalidated input leading to a SQL injection attack that could obtain, update, and delete database informati...

ROS-20250505-04

The vulnerability of the Zabbix universal monitoring system is related to insufficient cleansing of user data passed via the "groupBy" parameter in include/classes/api/CApiService.php. Exploitation of the vulnerability could allow a remote attacker to execute arbitrary SQL queries in the database...

CVE-2025-3707 Sunnet eHRD CTMS - SQL Injection

The eHDR CTMS from Sunnet has a SQL Injection vulnerability, allowing remote attackers with regular privileges to inject arbitrary SQL command to read database contents...

CVE-2025-3707

The CVE-2025-3707 entry concerns Sunnet’s eHDR CTMS which is affected by a SQL Injection vulnerability in the CTMS component. The issue allows remote attackers with regular privileges to inject arbitrary SQL commands and read database contents, with the confidentiality impact rated High (CVSS 3.1...

CVE-2025-3708: Improper Neutralization of Special Elements used in an SQL Command

Le-show medical practice management system from Le-yan has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents...

PT-2025-18747 · Le Yan · Le-Show Medical Practice Management System

Name of the Vulnerable Software and Affected Versions: Le-show medical practice management system affected versions not specified Description: The Le-show medical practice management system from Le-yan has a SQL Injection vulnerability. This allows unauthenticated remote attackers to inject...

CVE-2025-45018

A SQL Injection vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary SQL code via the todate parameter...

CVE-2025-2890

CVE-2025-2890 affects the WordPress plugin “tagDiv Opt-In Builder” (TagDiv Opt-In Builder) and is exploitable via a time-based SQL Injection in the subscriptionCouponId parameter. All versions up to and including 1.7 are affected due to insufficient escaping and improper preparation of the SQL qu...

PHPGurukul Preschool Enrollment System Injection Vulnerability

Pre-School Enrollment System is a web-based preschool enrollment system. The Pre-School Enrollment System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Status in file /admin/visitor-details.php. An...